Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
File: r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft (raw, json)
Hash identifier: Zk42FHvBGNaQN+pgJbZjW4/gUW6sCITSV9D8Se02EbM=
Subject key identifier: 28:B3:DE:42:89:5F:8F:DC:A4:3F:C3:A9:13:F6:0E:04:05:91:BA:3A
Authority key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
Certificate issuer: /CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Certificate serial: 0197B77C50EE4D76EBBADE894A2FF8B52A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 17:01:07 +0000
Manifest this update: Sat 28 Jun 2025 17:01:07 +0000
Manifest next update: Sun 29 Jun 2025 17:01:07 +0000
Files and hashes: 1: r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl (hash: qBzCgWugOtPhX/gecudmlX+kVTVNKXtS3CXEhnEervs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:50:ee:4d:76:eb:ba:de:89:4a:2f:f8:b5:2a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Validity
Not Before: Jun 28 17:01:07 2025 GMT
Not After : Jun 29 17:01:07 2025 GMT
Subject: CN=28b3de42895f8fdca43fc3a913f60e040591ba3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:d3:b1:05:02:27:fd:fd:79:84:69:b8:a1:
3f:fb:55:e6:a5:50:c7:d8:00:f4:61:e6:1a:56:3f:
f3:7d:77:c1:3a:eb:46:a4:bb:98:09:14:2c:55:67:
02:87:6e:19:fc:9a:fc:49:07:88:52:f0:1c:57:ca:
31:58:2e:74:56:22:57:84:57:bf:b0:dc:23:e0:21:
76:16:b8:ff:fa:62:69:b3:b4:a8:24:13:56:df:92:
29:ee:5a:25:f6:1a:9c:f6:55:7d:fa:c4:a8:6f:23:
8e:95:b1:85:92:b0:de:3e:61:60:ae:f1:3b:11:58:
05:91:98:4f:38:4a:14:4b:62:b5:99:b4:75:a6:f8:
d0:4a:cf:97:5c:f9:e8:f3:21:31:51:49:26:8b:e9:
ba:08:4c:42:1b:25:38:15:68:fb:19:de:7f:cc:37:
de:a3:6f:03:4b:43:0d:ef:f1:e0:d8:b0:9d:bc:4a:
f7:68:9e:66:0a:e6:51:0b:9a:b1:34:65:a5:2f:0f:
5d:b5:01:84:f6:df:20:4e:8a:21:37:d5:b3:b7:2f:
e0:70:10:ce:2f:21:f1:1c:4a:4a:46:f8:8c:88:9e:
4b:12:4d:d7:75:9d:c5:8a:64:a7:72:52:94:04:25:
f9:86:a6:2c:ac:97:23:cb:26:a2:c3:37:92:4d:49:
4d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B3:DE:42:89:5F:8F:DC:A4:3F:C3:A9:13:F6:0E:04:05:91:BA:3A
X509v3 Authority Key Identifier:
keyid:AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:31:ca:46:2c:5b:f4:02:b3:56:32:4a:10:73:46:50:c0:f6:
a0:1c:4f:8f:9f:28:29:a7:ad:5c:8a:22:a1:ac:8c:67:db:90:
31:db:a5:75:f2:d8:18:58:f1:84:86:50:ec:bc:f4:7d:e6:30:
9b:b2:e8:99:b5:b7:bf:a4:ba:27:d8:e6:e9:04:34:3f:44:78:
22:03:54:87:0b:6e:a6:dd:f0:cc:8f:2d:aa:fb:95:ff:db:ea:
85:d3:d4:4a:67:97:e2:50:31:46:3c:e0:04:54:c5:c4:c1:7c:
18:b8:41:6d:65:6a:24:bd:96:2d:be:7d:bc:f4:cd:40:10:41:
d5:fb:0e:44:5e:6f:af:e1:1d:c7:1e:64:73:ea:61:23:00:6d:
a3:e7:49:55:aa:cc:f5:b2:13:e1:cf:83:c3:fa:47:37:52:f2:
b8:8c:ba:30:cf:6d:e3:9a:6d:cb:12:ce:28:20:cc:cd:6d:57:
b6:55:f2:5a:b6:80:d6:7b:3a:68:6c:5e:42:fd:19:a5:02:78:
e1:02:dd:a2:d1:cc:96:db:db:36:06:c6:75:95:a0:39:9c:94:
88:03:9e:9c:b3:df:ff:eb:d5:c9:66:17:89:a5:3a:fa:7d:c8:
fd:01:21:08:52:fe:a2:b6:55:cd:06:71:cd:7d:05:fc:c6:e3:
fe:84:2e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:25 2025 by rpki-client